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IN THE CLAIMS 

Claim 1. (Currently Amended) A method of establishing a VPN tunnel through a wireless 
network, the method comprising the steps of: 

passing identifying information associated with a wireless user to a VPN host network* 
the identifying information comprising a conceptual ID. user ID. and password ; 

evaluating the identifying information by the VPN host network to obtain a VPN host 
network access result; and 

granting wireless access to the wireless user on the wireless network based on the VPN 
host network access result, to thereby enable both wireless network access and VPN host 
network access to be obtained without requiring evaluation of the identifying information by the 
wireless network. 

Claim 2. (Original) The method of claim 1, wherein the step of evaluating comprises 
authenticating the wireless user based on the identifying information, associated with the wireless 
user, and ascertaining whether the user is authorized to access at least one of the VPN host 
network and the wireless network. 

Claim 3. (Canceled) 

Claim 4. (Original) The method of claim 1, wherein the step of passing identifying information 
to the VPN host network comprises receiving by the wireless network the identifying 
information, and transmitting by the wireless network at least a subset of the identifying 
information to the VPN host network. 

Claim 5. (Currently Amended) The method of claim 4, wherein the identifying information 
comprises at lociot n conceptual ID, uoer ID and pofiflwerdr - and - wh e r e in the subset of the 
identifying information comprises the user ID and password. 

Claim 6. (Original) The method of claim 5, wherein the conceptual ID is not encrypted when 
received by the wireless network, and wherein the user ID and password are encrypted when 
received by the wireless network, and wherein the wireless network does not decrypt the user ID 
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and password prior to transmitting the subset of the identifying information to the VPN host 
network. 

Claim 7. (Original) The method of claim 1, further comprising a step of establishing a VPN 
tunnel between the VPN host network and the wireless network, 

Claim 8. (Currently Amended) The method of claim 7, A method of octabliahing a VPN tunn e l 
through a wiroloss notwork, the mothod comprising tho at e ps of: 

passing idontifying information araoointod with a wir e l e ss - user to q VPN host network; 

evaluating tho identifying information by tho VPN host network to obtain an aoo e ss 

I w J Li 1 If 

granting acooop to tho wiroloao u oe r on tho wirolooo network baood on th e aco e ss r es td t- 

and 

establishing a VPN tunnel b e tween th e- VPN hoot network and tho wirel e ss n e twork; 
wherein the wireless network includes a wireless access point, and wherein the VPN 
tunnel is established between the VPN host network and the wireless access point 

Claim 9. (Original) The method of claim 1, farther comprising assigning, by the VPN host 
network, an IP address for use by the wireless user. 

Claim 10. (Original) The method of claim 1, further comprising a step of enabling the wireless 
user to access an established VPN tunnel with the VPN host network. 

Claim 11. (Original) The method of claim 1, further comprising a step of establishing an 
encrypted session between the wireless user and the wireless network, and establishing a VPN 
tunnel between the wireless network and the VPN host network. 

Claim 12. (Currently Amended) A wireless access point, comprising: 
a processor containing control logic configured to: 

establish an encrypted session with a wireless user; and 

establish a VPN tunnel to a VPN host network on behalf of the wireless user; 
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wWin thfl control logic is configured to relv on the VPN host network for 
authentication and authorization service s with respect to the wireless user. 

Claim 13. (Original) The wireless access point of claim 12, wherein the VPN tunnel to the VPN 
host network is an EP Sec tunnel, and wherein the encrypted session with the wireless user 
comprises encrypting packets to be passed over the wireless network. 

Claim 14. (Original) The wireless access point of claim 12, further comprising means for 
enabling the VPN host network to assign a private IP address to the wireless user. 

Claim 15. (Original) The wireless access point of claim 12, a switch fabric configured to 
interface network ports and wireless access ports, and a routing information base configured to 
enable the control logic to route packets received at at least one of the network ports and wireless 
access ports to another of the network ports and wireless access ports. 

Claim 16. (Original) The wireless access point of claim 12, wherein the wireless access point is 
an aggregation point 

Claim 17. (Canceled) 

Claim 18. (Original) The wireless access point of claim 12, wherein the control logic is 
configured to map traffic received over the wireless network from the wireless network user to 
the VPN tunnel. 
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